user@host# set security screen ids-option block-frag ip block-frag user@host# set security zones security-zone zone screen block-frag